---
Function {
 argument: None,
 arguments: FunctionArguments {
  arguments: [
   FunctionArgument {
    identifier: "pkgs",
    default: None,
   },
   FunctionArgument {
    identifier: "lib",
    default: None,
   },
   FunctionArgument {
    identifier: "config",
    default: None,
   },
  ],
  ellipsis: true,
 },
 definition: With {
  expression: Variable {
   identifier: "lib",
   position: (3, 6),
  },
  target: LetIn {
   bindings: [
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "top",
        position: (6, 3),
       },
      ],
     },
     PropertyAccess {
      expression: Variable {
       identifier: "config",
       position: (6, 9),
      },
      attribute_path: AttributePath {
       attributes: [
        Raw {
         content: "services",
         position: (6, 16),
        },
        Raw {
         content: "kubernetes",
         position: (6, 25),
        },
       ],
      },
      default: None,
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "cfg",
        position: (7, 3),
       },
      ],
     },
     PropertyAccess {
      expression: Variable {
       identifier: "top",
       position: (7, 9),
      },
      attribute_path: AttributePath {
       attributes: [
        Raw {
         content: "pki",
         position: (7, 13),
        },
       ],
      },
      default: None,
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "csrCA",
        position: (9, 3),
       },
      ],
     },
     FunctionApplication {
      function: PropertyAccess {
       expression: Variable {
        identifier: "pkgs",
        position: (9, 11),
       },
       attribute_path: AttributePath {
        attributes: [
         Raw {
          content: "writeText",
          position: (9, 16),
         },
        ],
       },
       default: None,
      },
      arguments: [
       String {
        parts: [
         Raw {
          content: "kube-pki-cacert-csr.json",
          position: (9, 27),
         },
        ],
       },
       FunctionApplication {
        function: PropertyAccess {
         expression: Variable {
          identifier: "builtins",
          position: (9, 54),
         },
         attribute_path: AttributePath {
          attributes: [
           Raw {
            content: "toJSON",
            position: (9, 63),
           },
          ],
         },
         default: None,
        },
        arguments: [
         Map {
          bindings: [
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "key",
               position: (10, 5),
              },
             ],
            },
            Map {
             bindings: [
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "algo",
                  position: (11, 9),
                 },
                ],
               },
               String {
                parts: [
                 Raw {
                  content: "rsa",
                  position: (11, 17),
                 },
                ],
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "size",
                  position: (12, 9),
                 },
                ],
               },
               Int {
                value: 2048,
                position: (12, 16),
               },
              ),
             ],
             recursive: false,
             position: (10, 11),
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "names",
               position: (14, 5),
              },
             ],
            },
            FunctionApplication {
             function: Variable {
              identifier: "singleton",
              position: (14, 13),
             },
             arguments: [
              PropertyAccess {
               expression: Variable {
                identifier: "cfg",
                position: (14, 23),
               },
               attribute_path: AttributePath {
                attributes: [
                 Raw {
                  content: "caSpec",
                  position: (14, 27),
                 },
                ],
               },
               default: None,
              },
             ],
            },
           ),
          ],
          recursive: false,
          position: (9, 70),
         },
        ],
       },
      ],
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "csrCfssl",
        position: (17, 3),
       },
      ],
     },
     FunctionApplication {
      function: PropertyAccess {
       expression: Variable {
        identifier: "pkgs",
        position: (17, 14),
       },
       attribute_path: AttributePath {
        attributes: [
         Raw {
          content: "writeText",
          position: (17, 19),
         },
        ],
       },
       default: None,
      },
      arguments: [
       String {
        parts: [
         Raw {
          content: "kube-pki-cfssl-csr.json",
          position: (17, 30),
         },
        ],
       },
       FunctionApplication {
        function: PropertyAccess {
         expression: Variable {
          identifier: "builtins",
          position: (17, 56),
         },
         attribute_path: AttributePath {
          attributes: [
           Raw {
            content: "toJSON",
            position: (17, 65),
           },
          ],
         },
         default: None,
        },
        arguments: [
         Map {
          bindings: [
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "key",
               position: (18, 5),
              },
             ],
            },
            Map {
             bindings: [
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "algo",
                  position: (19, 9),
                 },
                ],
               },
               String {
                parts: [
                 Raw {
                  content: "rsa",
                  position: (19, 17),
                 },
                ],
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "size",
                  position: (20, 9),
                 },
                ],
               },
               Int {
                value: 2048,
                position: (20, 16),
               },
              ),
             ],
             recursive: false,
             position: (18, 11),
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "CN",
               position: (22, 5),
              },
             ],
            },
            PropertyAccess {
             expression: Variable {
              identifier: "top",
              position: (22, 10),
             },
             attribute_path: AttributePath {
              attributes: [
               Raw {
                content: "masterAddress",
                position: (22, 14),
               },
              ],
             },
             default: None,
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "hosts",
               position: (23, 5),
              },
             ],
            },
            BinaryOperation {
             operator: Concatenation,
             operands: [
              List {
               elements: [
                PropertyAccess {
                 expression: Variable {
                  identifier: "top",
                  position: (23, 14),
                 },
                 attribute_path: AttributePath {
                  attributes: [
                   Raw {
                    content: "masterAddress",
                    position: (23, 18),
                   },
                  ],
                 },
                 default: None,
                },
               ],
               position: (23, 13),
              },
              PropertyAccess {
               expression: Variable {
                identifier: "cfg",
                position: (23, 36),
               },
               attribute_path: AttributePath {
                attributes: [
                 Raw {
                  content: "cfsslAPIExtraSANs",
                  position: (23, 40),
                 },
                ],
               },
               default: None,
              },
             ],
             position: (23, 33),
            },
           ),
          ],
          recursive: false,
          position: (17, 72),
         },
        ],
       },
      ],
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "cfsslAPITokenBaseName",
        position: (26, 3),
       },
      ],
     },
     String {
      parts: [
       Raw {
        content: "apitoken.secret",
        position: (26, 28),
       },
      ],
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "cfsslAPITokenPath",
        position: (27, 3),
       },
      ],
     },
     String {
      parts: [
       Expression {
        expression: PropertyAccess {
         expression: Variable {
          identifier: "config",
          position: (27, 26),
         },
         attribute_path: AttributePath {
          attributes: [
           Raw {
            content: "services",
            position: (27, 33),
           },
           Raw {
            content: "cfssl",
            position: (27, 42),
           },
           Raw {
            content: "dataDir",
            position: (27, 48),
           },
          ],
         },
         default: None,
        },
       },
       Raw {
        content: "/",
        position: (27, 56),
       },
       Expression {
        expression: Variable {
         identifier: "cfsslAPITokenBaseName",
         position: (27, 59),
        },
       },
      ],
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "certmgrAPITokenPath",
        position: (28, 3),
       },
      ],
     },
     String {
      parts: [
       Expression {
        expression: PropertyAccess {
         expression: Variable {
          identifier: "top",
          position: (28, 28),
         },
         attribute_path: AttributePath {
          attributes: [
           Raw {
            content: "secretsPath",
            position: (28, 32),
           },
          ],
         },
         default: None,
        },
       },
       Raw {
        content: "/",
        position: (28, 44),
       },
       Expression {
        expression: Variable {
         identifier: "cfsslAPITokenBaseName",
         position: (28, 47),
        },
       },
      ],
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "cfsslAPITokenLength",
        position: (29, 3),
       },
      ],
     },
     Int {
      value: 32,
      position: (29, 25),
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "clusterAdminKubeconfig",
        position: (31, 3),
       },
      ],
     },
     With {
      expression: PropertyAccess {
       expression: Variable {
        identifier: "cfg",
        position: (31, 33),
       },
       attribute_path: AttributePath {
        attributes: [
         Raw {
          content: "certs",
          position: (31, 37),
         },
         Raw {
          content: "clusterAdmin",
          position: (31, 43),
         },
        ],
       },
       default: None,
      },
      target: FunctionApplication {
       function: PropertyAccess {
        expression: Variable {
         identifier: "top",
         position: (32, 5),
        },
        attribute_path: AttributePath {
         attributes: [
          Raw {
           content: "lib",
           position: (32, 9),
          },
          Raw {
           content: "mkKubeConfig",
           position: (32, 13),
          },
         ],
        },
        default: None,
       },
       arguments: [
        String {
         parts: [
          Raw {
           content: "cluster-admin",
           position: (32, 27),
          },
         ],
        },
        Map {
         bindings: [
          KeyValue(
           AttributePath {
            attributes: [
             Raw {
              content: "server",
              position: (33, 9),
             },
            ],
           },
           PropertyAccess {
            expression: Variable {
             identifier: "top",
             position: (33, 18),
            },
            attribute_path: AttributePath {
             attributes: [
              Raw {
               content: "apiserverAddress",
               position: (33, 22),
              },
             ],
            },
            default: None,
           },
          ),
          KeyValue(
           AttributePath {
            attributes: [
             Raw {
              content: "certFile",
              position: (34, 9),
             },
            ],
           },
           Variable {
            identifier: "cert",
            position: (34, 20),
           },
          ),
          KeyValue(
           AttributePath {
            attributes: [
             Raw {
              content: "keyFile",
              position: (35, 9),
             },
            ],
           },
           Variable {
            identifier: "key",
            position: (35, 19),
           },
          ),
         ],
         recursive: false,
         position: (32, 42),
        },
       ],
      },
      position: (31, 28),
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "remote",
        position: (38, 3),
       },
      ],
     },
     With {
      expression: PropertyAccess {
       expression: Variable {
        identifier: "config",
        position: (38, 17),
       },
       attribute_path: AttributePath {
        attributes: [
         Raw {
          content: "services",
          position: (38, 24),
         },
        ],
       },
       default: None,
      },
      target: String {
       parts: [
        Raw {
         content: "https://",
         position: (38, 35),
        },
        Expression {
         expression: PropertyAccess {
          expression: Variable {
           identifier: "kubernetes",
           position: (38, 45),
          },
          attribute_path: AttributePath {
           attributes: [
            Raw {
             content: "masterAddress",
             position: (38, 56),
            },
           ],
          },
          default: None,
         },
        },
        Raw {
         content: ":",
         position: (38, 70),
        },
        Expression {
         expression: FunctionApplication {
          function: Variable {
           identifier: "toString",
           position: (38, 73),
          },
          arguments: [
           PropertyAccess {
            expression: Variable {
             identifier: "cfssl",
             position: (38, 82),
            },
            attribute_path: AttributePath {
             attributes: [
              Raw {
               content: "port",
               position: (38, 88),
              },
             ],
            },
            default: None,
           },
          ],
         },
        },
       ],
      },
      position: (38, 12),
     },
    ),
   ],
   target: Map {
    bindings: [
     KeyValue(
      AttributePath {
       attributes: [
        Raw {
         content: "options",
         position: (42, 3),
        },
        Raw {
         content: "services",
         position: (42, 11),
        },
        Raw {
         content: "kubernetes",
         position: (42, 20),
        },
        Raw {
         content: "pki",
         position: (42, 31),
        },
       ],
      },
      With {
       expression: PropertyAccess {
        expression: Variable {
         identifier: "lib",
         position: (42, 42),
        },
        attribute_path: AttributePath {
         attributes: [
          Raw {
           content: "types",
           position: (42, 46),
          },
         ],
        },
        default: None,
       },
       target: Map {
        bindings: [
         KeyValue(
          AttributePath {
           attributes: [
            Raw {
             content: "enable",
             position: (44, 5),
            },
           ],
          },
          FunctionApplication {
           function: Variable {
            identifier: "mkEnableOption",
            position: (44, 14),
           },
           arguments: [
            String {
             parts: [
              Raw {
               content: "easyCert issuer service",
               position: (44, 30),
              },
             ],
            },
           ],
          },
         ),
         KeyValue(
          AttributePath {
           attributes: [
            Raw {
             content: "certs",
             position: (46, 5),
            },
           ],
          },
          FunctionApplication {
           function: Variable {
            identifier: "mkOption",
            position: (46, 13),
           },
           arguments: [
            Map {
             bindings: [
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "description",
                  position: (47, 7),
                 },
                ],
               },
               String {
                parts: [
                 Raw {
                  content: "List of certificate specs to feed to cert generator.",
                  position: (47, 22),
                 },
                ],
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "default",
                  position: (48, 7),
                 },
                ],
               },
               Map {
                bindings: [],
                recursive: false,
                position: (48, 17),
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "type",
                  position: (49, 7),
                 },
                ],
               },
               Variable {
                identifier: "attrs",
                position: (49, 14),
               },
              ),
             ],
             recursive: false,
             position: (46, 22),
            },
           ],
          },
         ),
         KeyValue(
          AttributePath {
           attributes: [
            Raw {
             content: "genCfsslCACert",
             position: (52, 5),
            },
           ],
          },
          FunctionApplication {
           function: Variable {
            identifier: "mkOption",
            position: (52, 22),
           },
           arguments: [
            Map {
             bindings: [
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "description",
                  position: (53, 7),
                 },
                ],
               },
               String {
                parts: [
                 Raw {
                  content: "Whether to automatically generate cfssl CA certificate and key,\nif they don't exist.\n",
                  position: (54, 1),
                 },
                ],
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "default",
                  position: (57, 7),
                 },
                ],
               },
               Variable {
                identifier: "true",
                position: (57, 17),
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "type",
                  position: (58, 7),
                 },
                ],
               },
               Variable {
                identifier: "bool",
                position: (58, 14),
               },
              ),
             ],
             recursive: false,
             position: (52, 31),
            },
           ],
          },
         ),
         KeyValue(
          AttributePath {
           attributes: [
            Raw {
             content: "genCfsslAPICerts",
             position: (61, 5),
            },
           ],
          },
          FunctionApplication {
           function: Variable {
            identifier: "mkOption",
            position: (61, 24),
           },
           arguments: [
            Map {
             bindings: [
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "description",
                  position: (62, 7),
                 },
                ],
               },
               String {
                parts: [
                 Raw {
                  content: "Whether to automatically generate cfssl API webserver TLS cert and key,\nif they don't exist.\n",
                  position: (63, 1),
                 },
                ],
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "default",
                  position: (66, 7),
                 },
                ],
               },
               Variable {
                identifier: "true",
                position: (66, 17),
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "type",
                  position: (67, 7),
                 },
                ],
               },
               Variable {
                identifier: "bool",
                position: (67, 14),
               },
              ),
             ],
             recursive: false,
             position: (61, 33),
            },
           ],
          },
         ),
         KeyValue(
          AttributePath {
           attributes: [
            Raw {
             content: "cfsslAPIExtraSANs",
             position: (70, 5),
            },
           ],
          },
          FunctionApplication {
           function: Variable {
            identifier: "mkOption",
            position: (70, 25),
           },
           arguments: [
            Map {
             bindings: [
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "description",
                  position: (71, 7),
                 },
                ],
               },
               String {
                parts: [
                 Raw {
                  content: "Extra x509 Subject Alternative Names to be added to the cfssl API webserver TLS cert.\n",
                  position: (72, 1),
                 },
                ],
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "default",
                  position: (74, 7),
                 },
                ],
               },
               List {
                elements: [],
                position: (74, 17),
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "example",
                  position: (75, 7),
                 },
                ],
               },
               List {
                elements: [
                 String {
                  parts: [
                   Raw {
                    content: "subdomain.example.com",
                    position: (75, 20),
                   },
                  ],
                 },
                ],
                position: (75, 17),
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "type",
                  position: (76, 7),
                 },
                ],
               },
               FunctionApplication {
                function: Variable {
                 identifier: "listOf",
                 position: (76, 14),
                },
                arguments: [
                 Variable {
                  identifier: "str",
                  position: (76, 21),
                 },
                ],
               },
              ),
             ],
             recursive: false,
             position: (70, 34),
            },
           ],
          },
         ),
         KeyValue(
          AttributePath {
           attributes: [
            Raw {
             content: "genCfsslAPIToken",
             position: (79, 5),
            },
           ],
          },
          FunctionApplication {
           function: Variable {
            identifier: "mkOption",
            position: (79, 24),
           },
           arguments: [
            Map {
             bindings: [
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "description",
                  position: (80, 7),
                 },
                ],
               },
               String {
                parts: [
                 Raw {
                  content: "Whether to automatically generate cfssl API-token secret,\nif they doesn't exist.\n",
                  position: (81, 1),
                 },
                ],
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "default",
                  position: (84, 7),
                 },
                ],
               },
               Variable {
                identifier: "true",
                position: (84, 17),
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "type",
                  position: (85, 7),
                 },
                ],
               },
               Variable {
                identifier: "bool",
                position: (85, 14),
               },
              ),
             ],
             recursive: false,
             position: (79, 33),
            },
           ],
          },
         ),
         KeyValue(
          AttributePath {
           attributes: [
            Raw {
             content: "pkiTrustOnBootstrap",
             position: (88, 5),
            },
           ],
          },
          FunctionApplication {
           function: Variable {
            identifier: "mkOption",
            position: (88, 27),
           },
           arguments: [
            Map {
             bindings: [
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "description",
                  position: (89, 7),
                 },
                ],
               },
               String {
                parts: [
                 Raw {
                  content: "Whether to always trust remote cfssl server upon initial PKI bootstrap.",
                  position: (89, 22),
                 },
                ],
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "default",
                  position: (90, 7),
                 },
                ],
               },
               Variable {
                identifier: "true",
                position: (90, 17),
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "type",
                  position: (91, 7),
                 },
                ],
               },
               Variable {
                identifier: "bool",
                position: (91, 14),
               },
              ),
             ],
             recursive: false,
             position: (88, 36),
            },
           ],
          },
         ),
         KeyValue(
          AttributePath {
           attributes: [
            Raw {
             content: "caCertPathPrefix",
             position: (94, 5),
            },
           ],
          },
          FunctionApplication {
           function: Variable {
            identifier: "mkOption",
            position: (94, 24),
           },
           arguments: [
            Map {
             bindings: [
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "description",
                  position: (95, 7),
                 },
                ],
               },
               String {
                parts: [
                 Raw {
                  content: "Path-prefrix for the CA-certificate to be used for cfssl signing.\nSuffixes \".pem\" and \"-key.pem\" will be automatically appended for\nthe public and private keys respectively.\n",
                  position: (96, 1),
                 },
                ],
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "default",
                  position: (100, 7),
                 },
                ],
               },
               String {
                parts: [
                 Expression {
                  expression: PropertyAccess {
                   expression: Variable {
                    identifier: "config",
                    position: (100, 20),
                   },
                   attribute_path: AttributePath {
                    attributes: [
                     Raw {
                      content: "services",
                      position: (100, 27),
                     },
                     Raw {
                      content: "cfssl",
                      position: (100, 36),
                     },
                     Raw {
                      content: "dataDir",
                      position: (100, 42),
                     },
                    ],
                   },
                   default: None,
                  },
                 },
                 Raw {
                  content: "/ca",
                  position: (100, 50),
                 },
                ],
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "defaultText",
                  position: (101, 7),
                 },
                ],
               },
               FunctionApplication {
                function: Variable {
                 identifier: "literalExpression",
                 position: (101, 21),
                },
                arguments: [
                 String {
                  parts: [
                   Raw {
                    content: "\"",
                    position: (101, 41),
                   },
                   Raw {
                    content: "$",
                    position: (101, 42),
                   },
                   Raw {
                    content: "{config.services.cfssl.dataDir}/ca\"",
                    position: (101, 45),
                   },
                  ],
                 },
                ],
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "type",
                  position: (102, 7),
                 },
                ],
               },
               Variable {
                identifier: "str",
                position: (102, 14),
               },
              ),
             ],
             recursive: false,
             position: (94, 33),
            },
           ],
          },
         ),
         KeyValue(
          AttributePath {
           attributes: [
            Raw {
             content: "caSpec",
             position: (105, 5),
            },
           ],
          },
          FunctionApplication {
           function: Variable {
            identifier: "mkOption",
            position: (105, 14),
           },
           arguments: [
            Map {
             bindings: [
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "description",
                  position: (106, 7),
                 },
                ],
               },
               String {
                parts: [
                 Raw {
                  content: "Certificate specification for the auto-generated CAcert.",
                  position: (106, 22),
                 },
                ],
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "default",
                  position: (107, 7),
                 },
                ],
               },
               Map {
                bindings: [
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "CN",
                     position: (108, 9),
                    },
                   ],
                  },
                  String {
                   parts: [
                    Raw {
                     content: "kubernetes-cluster-ca",
                     position: (108, 15),
                    },
                   ],
                  },
                 ),
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "O",
                     position: (109, 9),
                    },
                   ],
                  },
                  String {
                   parts: [
                    Raw {
                     content: "NixOS",
                     position: (109, 14),
                    },
                   ],
                  },
                 ),
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "OU",
                     position: (110, 9),
                    },
                   ],
                  },
                  String {
                   parts: [
                    Raw {
                     content: "services.kubernetes.pki.caSpec",
                     position: (110, 15),
                    },
                   ],
                  },
                 ),
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "L",
                     position: (111, 9),
                    },
                   ],
                  },
                  String {
                   parts: [
                    Raw {
                     content: "auto-generated",
                     position: (111, 14),
                    },
                   ],
                  },
                 ),
                ],
                recursive: false,
                position: (107, 17),
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "type",
                  position: (113, 7),
                 },
                ],
               },
               Variable {
                identifier: "attrs",
                position: (113, 14),
               },
              ),
             ],
             recursive: false,
             position: (105, 23),
            },
           ],
          },
         ),
         KeyValue(
          AttributePath {
           attributes: [
            Raw {
             content: "etcClusterAdminKubeconfig",
             position: (116, 5),
            },
           ],
          },
          FunctionApplication {
           function: Variable {
            identifier: "mkOption",
            position: (116, 33),
           },
           arguments: [
            Map {
             bindings: [
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "description",
                  position: (117, 7),
                 },
                ],
               },
               String {
                parts: [
                 Raw {
                  content: "Symlink a kubeconfig with cluster-admin privileges to environment path\n(/etc/&lt;path&gt;).\n",
                  position: (118, 1),
                 },
                ],
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "default",
                  position: (121, 7),
                 },
                ],
               },
               Variable {
                identifier: "null",
                position: (121, 17),
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "type",
                  position: (122, 7),
                 },
                ],
               },
               FunctionApplication {
                function: Variable {
                 identifier: "nullOr",
                 position: (122, 14),
                },
                arguments: [
                 Variable {
                  identifier: "str",
                  position: (122, 21),
                 },
                ],
               },
              ),
             ],
             recursive: false,
             position: (116, 42),
            },
           ],
          },
         ),
        ],
        recursive: false,
        position: (42, 53),
       },
       position: (42, 37),
      },
     ),
     KeyValue(
      AttributePath {
       attributes: [
        Raw {
         content: "config",
         position: (128, 3),
        },
       ],
      },
      FunctionApplication {
       function: Variable {
        identifier: "mkIf",
        position: (128, 12),
       },
       arguments: [
        PropertyAccess {
         expression: Variable {
          identifier: "cfg",
          position: (128, 17),
         },
         attribute_path: AttributePath {
          attributes: [
           Raw {
            content: "enable",
            position: (128, 21),
           },
          ],
         },
         default: None,
        },
        LetIn {
         bindings: [
          KeyValue(
           AttributePath {
            attributes: [
             Raw {
              content: "cfsslCertPathPrefix",
              position: (130, 5),
             },
            ],
           },
           String {
            parts: [
             Expression {
              expression: PropertyAccess {
               expression: Variable {
                identifier: "config",
                position: (130, 30),
               },
               attribute_path: AttributePath {
                attributes: [
                 Raw {
                  content: "services",
                  position: (130, 37),
                 },
                 Raw {
                  content: "cfssl",
                  position: (130, 46),
                 },
                 Raw {
                  content: "dataDir",
                  position: (130, 52),
                 },
                ],
               },
               default: None,
              },
             },
             Raw {
              content: "/cfssl",
              position: (130, 60),
             },
            ],
           },
          ),
          KeyValue(
           AttributePath {
            attributes: [
             Raw {
              content: "cfsslCert",
              position: (131, 5),
             },
            ],
           },
           String {
            parts: [
             Expression {
              expression: Variable {
               identifier: "cfsslCertPathPrefix",
               position: (131, 20),
              },
             },
             Raw {
              content: ".pem",
              position: (131, 40),
             },
            ],
           },
          ),
          KeyValue(
           AttributePath {
            attributes: [
             Raw {
              content: "cfsslKey",
              position: (132, 5),
             },
            ],
           },
           String {
            parts: [
             Expression {
              expression: Variable {
               identifier: "cfsslCertPathPrefix",
               position: (132, 19),
              },
             },
             Raw {
              content: "-key.pem",
              position: (132, 39),
             },
            ],
           },
          ),
         ],
         target: Map {
          bindings: [
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "services",
               position: (136, 5),
              },
              Raw {
               content: "cfssl",
               position: (136, 14),
              },
             ],
            },
            FunctionApplication {
             function: Variable {
              identifier: "mkIf",
              position: (136, 22),
             },
             arguments: [
              PropertyAccess {
               expression: Variable {
                identifier: "top",
                position: (136, 28),
               },
               attribute_path: AttributePath {
                attributes: [
                 Raw {
                  content: "apiserver",
                  position: (136, 32),
                 },
                 Raw {
                  content: "enable",
                  position: (136, 42),
                 },
                ],
               },
               default: None,
              },
              Map {
               bindings: [
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "enable",
                    position: (137, 7),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (137, 16),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "address",
                    position: (138, 7),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "0.0.0.0",
                    position: (138, 18),
                   },
                  ],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "tlsCert",
                    position: (139, 7),
                   },
                  ],
                 },
                 Variable {
                  identifier: "cfsslCert",
                  position: (139, 17),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "tlsKey",
                    position: (140, 7),
                   },
                  ],
                 },
                 Variable {
                  identifier: "cfsslKey",
                  position: (140, 16),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "configFile",
                    position: (141, 7),
                   },
                  ],
                 },
                 FunctionApplication {
                  function: Variable {
                   identifier: "toString",
                   position: (141, 20),
                  },
                  arguments: [
                   FunctionApplication {
                    function: PropertyAccess {
                     expression: Variable {
                      identifier: "pkgs",
                      position: (141, 30),
                     },
                     attribute_path: AttributePath {
                      attributes: [
                       Raw {
                        content: "writeText",
                        position: (141, 35),
                       },
                      ],
                     },
                     default: None,
                    },
                    arguments: [
                     String {
                      parts: [
                       Raw {
                        content: "cfssl-config.json",
                        position: (141, 46),
                       },
                      ],
                     },
                     FunctionApplication {
                      function: PropertyAccess {
                       expression: Variable {
                        identifier: "builtins",
                        position: (141, 66),
                       },
                       attribute_path: AttributePath {
                        attributes: [
                         Raw {
                          content: "toJSON",
                          position: (141, 75),
                         },
                        ],
                       },
                       default: None,
                      },
                      arguments: [
                       Map {
                        bindings: [
                         KeyValue(
                          AttributePath {
                           attributes: [
                            Raw {
                             content: "signing",
                             position: (142, 9),
                            },
                           ],
                          },
                          Map {
                           bindings: [
                            KeyValue(
                             AttributePath {
                              attributes: [
                               Raw {
                                content: "profiles",
                                position: (143, 11),
                               },
                              ],
                             },
                             Map {
                              bindings: [
                               KeyValue(
                                AttributePath {
                                 attributes: [
                                  Raw {
                                   content: "default",
                                   position: (144, 13),
                                  },
                                 ],
                                },
                                Map {
                                 bindings: [
                                  KeyValue(
                                   AttributePath {
                                    attributes: [
                                     Raw {
                                      content: "usages",
                                      position: (145, 15),
                                     },
                                    ],
                                   },
                                   List {
                                    elements: [
                                     String {
                                      parts: [
                                       Raw {
                                        content: "digital signature",
                                        position: (145, 26),
                                       },
                                      ],
                                     },
                                    ],
                                    position: (145, 24),
                                   },
                                  ),
                                  KeyValue(
                                   AttributePath {
                                    attributes: [
                                     Raw {
                                      content: "auth_key",
                                      position: (146, 15),
                                     },
                                    ],
                                   },
                                   String {
                                    parts: [
                                     Raw {
                                      content: "default",
                                      position: (146, 27),
                                     },
                                    ],
                                   },
                                  ),
                                  KeyValue(
                                   AttributePath {
                                    attributes: [
                                     Raw {
                                      content: "expiry",
                                      position: (147, 15),
                                     },
                                    ],
                                   },
                                   String {
                                    parts: [
                                     Raw {
                                      content: "720h",
                                      position: (147, 25),
                                     },
                                    ],
                                   },
                                  ),
                                 ],
                                 recursive: false,
                                 position: (144, 23),
                                },
                               ),
                              ],
                              recursive: false,
                              position: (143, 22),
                             },
                            ),
                           ],
                           recursive: false,
                           position: (142, 19),
                          },
                         ),
                         KeyValue(
                          AttributePath {
                           attributes: [
                            Raw {
                             content: "auth_keys",
                             position: (151, 9),
                            },
                           ],
                          },
                          Map {
                           bindings: [
                            KeyValue(
                             AttributePath {
                              attributes: [
                               Raw {
                                content: "default",
                                position: (152, 11),
                               },
                              ],
                             },
                             Map {
                              bindings: [
                               KeyValue(
                                AttributePath {
                                 attributes: [
                                  Raw {
                                   content: "type",
                                   position: (153, 13),
                                  },
                                 ],
                                },
                                String {
                                 parts: [
                                  Raw {
                                   content: "standard",
                                   position: (153, 21),
                                  },
                                 ],
                                },
                               ),
                               KeyValue(
                                AttributePath {
                                 attributes: [
                                  Raw {
                                   content: "key",
                                   position: (154, 13),
                                  },
                                 ],
                                },
                                String {
                                 parts: [
                                  Raw {
                                   content: "file:",
                                   position: (154, 20),
                                  },
                                  Expression {
                                   expression: Variable {
                                    identifier: "cfsslAPITokenPath",
                                    position: (154, 27),
                                   },
                                  },
                                 ],
                                },
                               ),
                              ],
                              recursive: false,
                              position: (152, 21),
                             },
                            ),
                           ],
                           recursive: false,
                           position: (151, 21),
                          },
                         ),
                        ],
                        recursive: false,
                        position: (141, 82),
                       },
                      ],
                     },
                    ],
                   },
                  ],
                 },
                ),
               ],
               recursive: false,
               position: (136, 50),
              },
             ],
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "systemd",
               position: (160, 5),
              },
              Raw {
               content: "services",
               position: (160, 13),
              },
              Raw {
               content: "cfssl",
               position: (160, 22),
              },
              Raw {
               content: "preStart",
               position: (160, 28),
              },
             ],
            },
            With {
             expression: Variable {
              identifier: "pkgs",
              position: (160, 44),
             },
             target: With {
              expression: PropertyAccess {
               expression: Variable {
                identifier: "config",
                position: (160, 55),
               },
               attribute_path: AttributePath {
                attributes: [
                 Raw {
                  content: "services",
                  position: (160, 62),
                 },
                 Raw {
                  content: "cfssl",
                  position: (160, 71),
                 },
                ],
               },
               default: None,
              },
              target: FunctionApplication {
               function: Variable {
                identifier: "mkIf",
                position: (160, 78),
               },
               arguments: [
                PropertyAccess {
                 expression: Variable {
                  identifier: "top",
                  position: (160, 84),
                 },
                 attribute_path: AttributePath {
                  attributes: [
                   Raw {
                    content: "apiserver",
                    position: (160, 88),
                   },
                   Raw {
                    content: "enable",
                    position: (160, 98),
                   },
                  ],
                 },
                 default: None,
                },
                FunctionApplication {
                 function: Variable {
                  identifier: "concatStringsSep",
                  position: (161, 6),
                 },
                 arguments: [
                  String {
                   parts: [
                    Raw {
                     content: "\n",
                     position: (161, 24),
                    },
                   ],
                  },
                  List {
                   elements: [
                    String {
                     parts: [
                      Raw {
                       content: "set -e",
                       position: (162, 8),
                      },
                     ],
                    },
                    FunctionApplication {
                     function: Variable {
                      identifier: "optionalString",
                      position: (163, 8),
                     },
                     arguments: [
                      PropertyAccess {
                       expression: Variable {
                        identifier: "cfg",
                        position: (163, 23),
                       },
                       attribute_path: AttributePath {
                        attributes: [
                         Raw {
                          content: "genCfsslCACert",
                          position: (163, 27),
                         },
                        ],
                       },
                       default: None,
                      },
                      String {
                       parts: [
                        Raw {
                         content: "if [ ! -f \"",
                         position: (164, 1),
                        },
                        Expression {
                         expression: PropertyAccess {
                          expression: Variable {
                           identifier: "cfg",
                           position: (164, 22),
                          },
                          attribute_path: AttributePath {
                           attributes: [
                            Raw {
                             content: "caCertPathPrefix",
                             position: (164, 26),
                            },
                           ],
                          },
                          default: None,
                         },
                        },
                        Raw {
                         content: ".pem\" ]; then\n  ",
                         position: (164, 43),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "cfssl",
                          position: (165, 13),
                         },
                        },
                        Raw {
                         content: "/bin/cfssl genkey -initca ",
                         position: (165, 19),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "csrCA",
                          position: (165, 47),
                         },
                        },
                        Raw {
                         content: " | \\\n    ",
                         position: (165, 53),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "cfssl",
                          position: (166, 15),
                         },
                        },
                        Raw {
                         content: "/bin/cfssljson -bare ",
                         position: (166, 21),
                        },
                        Expression {
                         expression: PropertyAccess {
                          expression: Variable {
                           identifier: "cfg",
                           position: (166, 44),
                          },
                          attribute_path: AttributePath {
                           attributes: [
                            Raw {
                             content: "caCertPathPrefix",
                             position: (166, 48),
                            },
                           ],
                          },
                          default: None,
                         },
                        },
                        Raw {
                         content: "\nfi\n",
                         position: (166, 65),
                        },
                       ],
                      },
                     ],
                    },
                    FunctionApplication {
                     function: Variable {
                      identifier: "optionalString",
                      position: (169, 8),
                     },
                     arguments: [
                      PropertyAccess {
                       expression: Variable {
                        identifier: "cfg",
                        position: (169, 23),
                       },
                       attribute_path: AttributePath {
                        attributes: [
                         Raw {
                          content: "genCfsslAPICerts",
                          position: (169, 27),
                         },
                        ],
                       },
                       default: None,
                      },
                      String {
                       parts: [
                        Raw {
                         content: "if [ ! -f \"",
                         position: (170, 1),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "dataDir",
                          position: (170, 22),
                         },
                        },
                        Raw {
                         content: "/cfssl.pem\" ]; then\n  ",
                         position: (170, 30),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "cfssl",
                          position: (171, 13),
                         },
                        },
                        Raw {
                         content: "/bin/cfssl gencert -ca \"",
                         position: (171, 19),
                        },
                        Expression {
                         expression: PropertyAccess {
                          expression: Variable {
                           identifier: "cfg",
                           position: (171, 45),
                          },
                          attribute_path: AttributePath {
                           attributes: [
                            Raw {
                             content: "caCertPathPrefix",
                             position: (171, 49),
                            },
                           ],
                          },
                          default: None,
                         },
                        },
                        Raw {
                         content: ".pem\" -ca-key \"",
                         position: (171, 66),
                        },
                        Expression {
                         expression: PropertyAccess {
                          expression: Variable {
                           identifier: "cfg",
                           position: (171, 83),
                          },
                          attribute_path: AttributePath {
                           attributes: [
                            Raw {
                             content: "caCertPathPrefix",
                             position: (171, 87),
                            },
                           ],
                          },
                          default: None,
                         },
                        },
                        Raw {
                         content: "-key.pem\" ",
                         position: (171, 104),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "csrCfssl",
                          position: (171, 116),
                         },
                        },
                        Raw {
                         content: " | \\\n    ",
                         position: (171, 125),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "cfssl",
                          position: (172, 15),
                         },
                        },
                        Raw {
                         content: "/bin/cfssljson -bare ",
                         position: (172, 21),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "cfsslCertPathPrefix",
                          position: (172, 44),
                         },
                        },
                        Raw {
                         content: "\nfi\n",
                         position: (172, 64),
                        },
                       ],
                      },
                     ],
                    },
                    FunctionApplication {
                     function: Variable {
                      identifier: "optionalString",
                      position: (175, 8),
                     },
                     arguments: [
                      PropertyAccess {
                       expression: Variable {
                        identifier: "cfg",
                        position: (175, 23),
                       },
                       attribute_path: AttributePath {
                        attributes: [
                         Raw {
                          content: "genCfsslAPIToken",
                          position: (175, 27),
                         },
                        ],
                       },
                       default: None,
                      },
                      String {
                       parts: [
                        Raw {
                         content: "if [ ! -f \"",
                         position: (176, 1),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "cfsslAPITokenPath",
                          position: (176, 22),
                         },
                        },
                        Raw {
                         content: "\" ]; then\n  head -c ",
                         position: (176, 40),
                        },
                        Expression {
                         expression: FunctionApplication {
                          function: Variable {
                           identifier: "toString",
                           position: (177, 21),
                          },
                          arguments: [
                           BinaryOperation {
                            operator: Division,
                            operands: [
                             Variable {
                              identifier: "cfsslAPITokenLength",
                              position: (177, 31),
                             },
                             Int {
                              value: 2,
                              position: (177, 53),
                             },
                            ],
                            position: (177, 51),
                           },
                          ],
                         },
                        },
                        Raw {
                         content: " /dev/urandom | od -An -t x | tr -d ' ' >\"",
                         position: (177, 56),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "cfsslAPITokenPath",
                          position: (177, 100),
                         },
                        },
                        Raw {
                         content: "\"\nfi\nchown cfssl \"",
                         position: (177, 118),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "cfsslAPITokenPath",
                          position: (179, 24),
                         },
                        },
                        Raw {
                         content: "\" && chmod 400 \"",
                         position: (179, 42),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "cfsslAPITokenPath",
                          position: (179, 60),
                         },
                        },
                        Raw {
                         content: "\"\n",
                         position: (179, 78),
                        },
                       ],
                      },
                     ],
                    },
                   ],
                   position: (161, 28),
                  },
                 ],
                },
               ],
              },
              position: (160, 50),
             },
             position: (160, 39),
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "systemd",
               position: (182, 5),
              },
              Raw {
               content: "services",
               position: (182, 13),
              },
              Raw {
               content: "kube-certmgr-bootstrap",
               position: (182, 22),
              },
             ],
            },
            Map {
             bindings: [
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "description",
                  position: (183, 7),
                 },
                ],
               },
               String {
                parts: [
                 Raw {
                  content: "Kubernetes certmgr bootstrapper",
                  position: (183, 22),
                 },
                ],
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "wantedBy",
                  position: (184, 7),
                 },
                ],
               },
               List {
                elements: [
                 String {
                  parts: [
                   Raw {
                    content: "certmgr.service",
                    position: (184, 21),
                   },
                  ],
                 },
                ],
                position: (184, 18),
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "after",
                  position: (185, 7),
                 },
                ],
               },
               List {
                elements: [
                 String {
                  parts: [
                   Raw {
                    content: "cfssl.target",
                    position: (185, 18),
                   },
                  ],
                 },
                ],
                position: (185, 15),
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "script",
                  position: (186, 7),
                 },
                ],
               },
               FunctionApplication {
                function: Variable {
                 identifier: "concatStringsSep",
                 position: (186, 16),
                },
                arguments: [
                 String {
                  parts: [
                   Raw {
                    content: "\n",
                    position: (186, 34),
                   },
                  ],
                 },
                 List {
                  elements: [
                   String {
                    parts: [
                     Raw {
                      content: "set -e\n\n# If there's a cfssl (cert issuer) running locally, then don't rely on user to\n# manually paste it in place. Just symlink.\n# otherwise, create the target file, ready for users to insert the token\n\nmkdir -p \"$(dirname \"",
                      position: (187, 1),
                     },
                     Expression {
                      expression: Variable {
                       identifier: "certmgrAPITokenPath",
                       position: (193, 32),
                      },
                     },
                     Raw {
                      content: "\")\"\nif [ -f \"",
                      position: (193, 52),
                     },
                     Expression {
                      expression: Variable {
                       identifier: "cfsslAPITokenPath",
                       position: (194, 20),
                      },
                     },
                     Raw {
                      content: "\" ]; then\n  ln -fs \"",
                      position: (194, 38),
                     },
                     Expression {
                      expression: Variable {
                       identifier: "cfsslAPITokenPath",
                       position: (195, 21),
                      },
                     },
                     Raw {
                      content: "\" \"",
                      position: (195, 39),
                     },
                     Expression {
                      expression: Variable {
                       identifier: "certmgrAPITokenPath",
                       position: (195, 44),
                      },
                     },
                     Raw {
                      content: "\"\nelse\n  touch \"",
                      position: (195, 64),
                     },
                     Expression {
                      expression: Variable {
                       identifier: "certmgrAPITokenPath",
                       position: (197, 20),
                      },
                     },
                     Raw {
                      content: "\" && chmod 600 \"",
                      position: (197, 40),
                     },
                     Expression {
                      expression: Variable {
                       identifier: "certmgrAPITokenPath",
                       position: (197, 58),
                      },
                     },
                     Raw {
                      content: "\"\nfi\n",
                      position: (197, 78),
                     },
                    ],
                   },
                   FunctionApplication {
                    function: Variable {
                     identifier: "optionalString",
                     position: (200, 8),
                    },
                    arguments: [
                     PropertyAccess {
                      expression: Variable {
                       identifier: "cfg",
                       position: (200, 24),
                      },
                      attribute_path: AttributePath {
                       attributes: [
                        Raw {
                         content: "pkiTrustOnBootstrap",
                         position: (200, 28),
                        },
                       ],
                      },
                      default: None,
                     },
                     String {
                      parts: [
                       Raw {
                        content: "if [ ! -f \"",
                        position: (201, 1),
                       },
                       Expression {
                        expression: PropertyAccess {
                         expression: Variable {
                          identifier: "top",
                          position: (201, 22),
                         },
                         attribute_path: AttributePath {
                          attributes: [
                           Raw {
                            content: "caFile",
                            position: (201, 26),
                           },
                          ],
                         },
                         default: None,
                        },
                       },
                       Raw {
                        content: "\" ] || [ $(cat \"",
                        position: (201, 33),
                       },
                       Expression {
                        expression: PropertyAccess {
                         expression: Variable {
                          identifier: "top",
                          position: (201, 51),
                         },
                         attribute_path: AttributePath {
                          attributes: [
                           Raw {
                            content: "caFile",
                            position: (201, 55),
                           },
                          ],
                         },
                         default: None,
                        },
                       },
                       Raw {
                        content: "\" | wc -c) -lt 1 ]; then\n  ",
                        position: (201, 62),
                       },
                       Expression {
                        expression: PropertyAccess {
                         expression: Variable {
                          identifier: "pkgs",
                          position: (202, 13),
                         },
                         attribute_path: AttributePath {
                          attributes: [
                           Raw {
                            content: "curl",
                            position: (202, 18),
                           },
                          ],
                         },
                         default: None,
                        },
                       },
                       Raw {
                        content: "/bin/curl --fail-early -f -kd '{}' ",
                        position: (202, 23),
                       },
                       Expression {
                        expression: Variable {
                         identifier: "remote",
                         position: (202, 60),
                        },
                       },
                       Raw {
                        content: "/api/v1/cfssl/info | \\\n    ",
                        position: (202, 67),
                       },
                       Expression {
                        expression: PropertyAccess {
                         expression: Variable {
                          identifier: "pkgs",
                          position: (203, 15),
                         },
                         attribute_path: AttributePath {
                          attributes: [
                           Raw {
                            content: "cfssl",
                            position: (203, 20),
                           },
                          ],
                         },
                         default: None,
                        },
                       },
                       Raw {
                        content: "/bin/cfssljson -stdout >",
                        position: (203, 26),
                       },
                       Expression {
                        expression: PropertyAccess {
                         expression: Variable {
                          identifier: "top",
                          position: (203, 52),
                         },
                         attribute_path: AttributePath {
                          attributes: [
                           Raw {
                            content: "caFile",
                            position: (203, 56),
                           },
                          ],
                         },
                         default: None,
                        },
                       },
                       Raw {
                        content: "\nfi\n",
                        position: (203, 63),
                       },
                      ],
                     },
                    ],
                   },
                  ],
                  position: (186, 38),
                 },
                ],
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "serviceConfig",
                  position: (207, 7),
                 },
                ],
               },
               Map {
                bindings: [
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "RestartSec",
                     position: (208, 9),
                    },
                   ],
                  },
                  String {
                   parts: [
                    Raw {
                     content: "10s",
                     position: (208, 23),
                    },
                   ],
                  },
                 ),
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "Restart",
                     position: (209, 9),
                    },
                   ],
                  },
                  String {
                   parts: [
                    Raw {
                     content: "on-failure",
                     position: (209, 20),
                    },
                   ],
                  },
                 ),
                ],
                recursive: false,
                position: (207, 23),
               },
              ),
             ],
             recursive: false,
             position: (182, 47),
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "services",
               position: (213, 5),
              },
              Raw {
               content: "certmgr",
               position: (213, 14),
              },
             ],
            },
            Map {
             bindings: [
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "enable",
                  position: (214, 7),
                 },
                ],
               },
               Variable {
                identifier: "true",
                position: (214, 16),
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "package",
                  position: (215, 7),
                 },
                ],
               },
               PropertyAccess {
                expression: Variable {
                 identifier: "pkgs",
                 position: (215, 17),
                },
                attribute_path: AttributePath {
                 attributes: [
                  Raw {
                   content: "certmgr-selfsigned",
                   position: (215, 22),
                  },
                 ],
                },
                default: None,
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "svcManager",
                  position: (216, 7),
                 },
                ],
               },
               String {
                parts: [
                 Raw {
                  content: "command",
                  position: (216, 21),
                 },
                ],
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "specs",
                  position: (217, 7),
                 },
                ],
               },
               LetIn {
                bindings: [
                 KeyValue(
                  AttributePath {
                   attributes: [
                    Raw {
                     content: "mkSpec",
                     position: (219, 11),
                    },
                   ],
                  },
                  Function {
                   argument: Some(
                    "_",
                   ),
                   arguments: FunctionArguments {
                    arguments: [],
                    ellipsis: false,
                   },
                   definition: Function {
                    argument: Some(
                     "cert",
                    ),
                    arguments: FunctionArguments {
                     arguments: [],
                     ellipsis: false,
                    },
                    definition: Map {
                     bindings: [
                      Inherit(
                       Some(
                        Variable {
                         identifier: "cert",
                         position: (220, 22),
                        },
                       ),
                       [
                        Raw {
                         content: "action",
                         position: (220, 28),
                        },
                       ],
                      ),
                      KeyValue(
                       AttributePath {
                        attributes: [
                         Raw {
                          content: "authority",
                          position: (221, 13),
                         },
                        ],
                       },
                       Map {
                        bindings: [
                         Inherit(
                          None,
                          [
                           Raw {
                            content: "remote",
                            position: (222, 23),
                           },
                          ],
                         ),
                         KeyValue(
                          AttributePath {
                           attributes: [
                            Raw {
                             content: "file",
                             position: (223, 15),
                            },
                            Raw {
                             content: "path",
                             position: (223, 20),
                            },
                           ],
                          },
                          PropertyAccess {
                           expression: Variable {
                            identifier: "cert",
                            position: (223, 27),
                           },
                           attribute_path: AttributePath {
                            attributes: [
                             Raw {
                              content: "caCert",
                              position: (223, 32),
                             },
                            ],
                           },
                           default: None,
                          },
                         ),
                         KeyValue(
                          AttributePath {
                           attributes: [
                            Raw {
                             content: "root_ca",
                             position: (224, 15),
                            },
                           ],
                          },
                          PropertyAccess {
                           expression: Variable {
                            identifier: "cert",
                            position: (224, 25),
                           },
                           attribute_path: AttributePath {
                            attributes: [
                             Raw {
                              content: "caCert",
                              position: (224, 30),
                             },
                            ],
                           },
                           default: None,
                          },
                         ),
                         KeyValue(
                          AttributePath {
                           attributes: [
                            Raw {
                             content: "profile",
                             position: (225, 15),
                            },
                           ],
                          },
                          String {
                           parts: [
                            Raw {
                             content: "default",
                             position: (225, 26),
                            },
                           ],
                          },
                         ),
                         KeyValue(
                          AttributePath {
                           attributes: [
                            Raw {
                             content: "auth_key_file",
                             position: (226, 15),
                            },
                           ],
                          },
                          Variable {
                           identifier: "certmgrAPITokenPath",
                           position: (226, 31),
                          },
                         ),
                        ],
                        recursive: false,
                        position: (221, 25),
                       },
                      ),
                      KeyValue(
                       AttributePath {
                        attributes: [
                         Raw {
                          content: "certificate",
                          position: (228, 13),
                         },
                        ],
                       },
                       Map {
                        bindings: [
                         KeyValue(
                          AttributePath {
                           attributes: [
                            Raw {
                             content: "path",
                             position: (229, 15),
                            },
                           ],
                          },
                          PropertyAccess {
                           expression: Variable {
                            identifier: "cert",
                            position: (229, 22),
                           },
                           attribute_path: AttributePath {
                            attributes: [
                             Raw {
                              content: "cert",
                              position: (229, 27),
                             },
                            ],
                           },
                           default: None,
                          },
                         ),
                        ],
                        recursive: false,
                        position: (228, 27),
                       },
                      ),
                      KeyValue(
                       AttributePath {
                        attributes: [
                         Raw {
                          content: "private_key",
                          position: (231, 13),
                         },
                        ],
                       },
                       PropertyAccess {
                        expression: Variable {
                         identifier: "cert",
                         position: (231, 27),
                        },
                        attribute_path: AttributePath {
                         attributes: [
                          Raw {
                           content: "privateKeyOptions",
                           position: (231, 32),
                          },
                         ],
                        },
                        default: None,
                       },
                      ),
                      KeyValue(
                       AttributePath {
                        attributes: [
                         Raw {
                          content: "request",
                          position: (232, 13),
                         },
                        ],
                       },
                       Map {
                        bindings: [
                         KeyValue(
                          AttributePath {
                           attributes: [
                            Raw {
                             content: "hosts",
                             position: (233, 15),
                            },
                           ],
                          },
                          BinaryOperation {
                           operator: Concatenation,
                           operands: [
                            List {
                             elements: [
                              PropertyAccess {
                               expression: Variable {
                                identifier: "cert",
                                position: (233, 24),
                               },
                               attribute_path: AttributePath {
                                attributes: [
                                 Raw {
                                  content: "CN",
                                  position: (233, 29),
                                 },
                                ],
                               },
                               default: None,
                              },
                             ],
                             position: (233, 23),
                            },
                            PropertyAccess {
                             expression: Variable {
                              identifier: "cert",
                              position: (233, 36),
                             },
                             attribute_path: AttributePath {
                              attributes: [
                               Raw {
                                content: "hosts",
                                position: (233, 41),
                               },
                              ],
                             },
                             default: None,
                            },
                           ],
                           position: (233, 33),
                          },
                         ),
                         Inherit(
                          Some(
                           Variable {
                            identifier: "cert",
                            position: (234, 24),
                           },
                          ),
                          [
                           Raw {
                            content: "CN",
                            position: (234, 30),
                           },
                          ],
                         ),
                         KeyValue(
                          AttributePath {
                           attributes: [
                            Raw {
                             content: "key",
                             position: (235, 15),
                            },
                           ],
                          },
                          Map {
                           bindings: [
                            KeyValue(
                             AttributePath {
                              attributes: [
                               Raw {
                                content: "algo",
                                position: (236, 17),
                               },
                              ],
                             },
                             String {
                              parts: [
                               Raw {
                                content: "rsa",
                                position: (236, 25),
                               },
                              ],
                             },
                            ),
                            KeyValue(
                             AttributePath {
                              attributes: [
                               Raw {
                                content: "size",
                                position: (237, 17),
                               },
                              ],
                             },
                             Int {
                              value: 2048,
                              position: (237, 24),
                             },
                            ),
                           ],
                           recursive: false,
                           position: (235, 21),
                          },
                         ),
                         KeyValue(
                          AttributePath {
                           attributes: [
                            Raw {
                             content: "names",
                             position: (239, 15),
                            },
                           ],
                          },
                          List {
                           elements: [
                            PropertyAccess {
                             expression: Variable {
                              identifier: "cert",
                              position: (239, 25),
                             },
                             attribute_path: AttributePath {
                              attributes: [
                               Raw {
                                content: "fields",
                                position: (239, 30),
                               },
                              ],
                             },
                             default: None,
                            },
                           ],
                           position: (239, 23),
                          },
                         ),
                        ],
                        recursive: false,
                        position: (232, 23),
                       },
                      ),
                     ],
                     recursive: false,
                     position: (219, 29),
                    },
                    position: (219, 23),
                   },
                   position: (219, 20),
                  },
                 ),
                ],
                target: FunctionApplication {
                 function: Variable {
                  identifier: "mapAttrs",
                  position: (243, 11),
                 },
                 arguments: [
                  Variable {
                   identifier: "mkSpec",
                   position: (243, 20),
                  },
                  PropertyAccess {
                   expression: Variable {
                    identifier: "cfg",
                    position: (243, 27),
                   },
                   attribute_path: AttributePath {
                    attributes: [
                     Raw {
                      content: "certs",
                      position: (243, 31),
                     },
                    ],
                   },
                   default: None,
                  },
                 ],
                },
                position: (218, 9),
               },
              ),
             ],
             recursive: false,
             position: (213, 24),
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "systemd",
               position: (251, 7),
              },
              Raw {
               content: "services",
               position: (251, 15),
              },
              Raw {
               content: "kube-addon-manager",
               position: (251, 24),
              },
             ],
            },
            FunctionApplication {
             function: Variable {
              identifier: "mkIf",
              position: (251, 45),
             },
             arguments: [
              PropertyAccess {
               expression: Variable {
                identifier: "top",
                position: (251, 50),
               },
               attribute_path: AttributePath {
                attributes: [
                 Raw {
                  content: "addonManager",
                  position: (251, 54),
                 },
                 Raw {
                  content: "enable",
                  position: (251, 67),
                 },
                ],
               },
               default: None,
              },
              FunctionApplication {
               function: Variable {
                identifier: "mkMerge",
                position: (251, 75),
               },
               arguments: [
                List {
                 elements: [
                  Map {
                   bindings: [
                    KeyValue(
                     AttributePath {
                      attributes: [
                       Raw {
                        content: "environment",
                        position: (252, 9),
                       },
                       Raw {
                        content: "KUBECONFIG",
                        position: (252, 21),
                       },
                      ],
                     },
                     With {
                      expression: PropertyAccess {
                       expression: Variable {
                        identifier: "cfg",
                        position: (252, 39),
                       },
                       attribute_path: AttributePath {
                        attributes: [
                         Raw {
                          content: "certs",
                          position: (252, 43),
                         },
                         Raw {
                          content: "addonManager",
                          position: (252, 49),
                         },
                        ],
                       },
                       default: None,
                      },
                      target: FunctionApplication {
                       function: PropertyAccess {
                        expression: Variable {
                         identifier: "top",
                         position: (253, 11),
                        },
                        attribute_path: AttributePath {
                         attributes: [
                          Raw {
                           content: "lib",
                           position: (253, 15),
                          },
                          Raw {
                           content: "mkKubeConfig",
                           position: (253, 19),
                          },
                         ],
                        },
                        default: None,
                       },
                       arguments: [
                        String {
                         parts: [
                          Raw {
                           content: "addon-manager",
                           position: (253, 33),
                          },
                         ],
                        },
                        Map {
                         bindings: [
                          KeyValue(
                           AttributePath {
                            attributes: [
                             Raw {
                              content: "server",
                              position: (254, 13),
                             },
                            ],
                           },
                           PropertyAccess {
                            expression: Variable {
                             identifier: "top",
                             position: (254, 22),
                            },
                            attribute_path: AttributePath {
                             attributes: [
                              Raw {
                               content: "apiserverAddress",
                               position: (254, 26),
                              },
                             ],
                            },
                            default: None,
                           },
                          ),
                          KeyValue(
                           AttributePath {
                            attributes: [
                             Raw {
                              content: "certFile",
                              position: (255, 13),
                             },
                            ],
                           },
                           Variable {
                            identifier: "cert",
                            position: (255, 24),
                           },
                          ),
                          KeyValue(
                           AttributePath {
                            attributes: [
                             Raw {
                              content: "keyFile",
                              position: (256, 13),
                             },
                            ],
                           },
                           Variable {
                            identifier: "key",
                            position: (256, 23),
                           },
                          ),
                         ],
                         recursive: false,
                         position: (253, 48),
                        },
                       ],
                      },
                      position: (252, 34),
                     },
                    ),
                   ],
                   recursive: false,
                   position: (251, 84),
                  },
                  FunctionApplication {
                   function: Variable {
                    identifier: "optionalAttrs",
                    position: (260, 10),
                   },
                   arguments: [
                    BinaryOperation {
                     operator: NotEqualTo,
                     operands: [
                      PropertyAccess {
                       expression: Variable {
                        identifier: "top",
                        position: (260, 25),
                       },
                       attribute_path: AttributePath {
                        attributes: [
                         Raw {
                          content: "addonManager",
                          position: (260, 29),
                         },
                         Raw {
                          content: "bootstrapAddons",
                          position: (260, 42),
                         },
                        ],
                       },
                       default: None,
                      },
                      Map {
                       bindings: [],
                       recursive: false,
                       position: (260, 61),
                      },
                     ],
                     position: (260, 58),
                    },
                    Map {
                     bindings: [
                      KeyValue(
                       AttributePath {
                        attributes: [
                         Raw {
                          content: "serviceConfig",
                          position: (261, 11),
                         },
                         Raw {
                          content: "PermissionsStartOnly",
                          position: (261, 25),
                         },
                        ],
                       },
                       Variable {
                        identifier: "true",
                        position: (261, 48),
                       },
                      ),
                      KeyValue(
                       AttributePath {
                        attributes: [
                         Raw {
                          content: "preStart",
                          position: (262, 11),
                         },
                        ],
                       },
                       With {
                        expression: Variable {
                         identifier: "pkgs",
                         position: (262, 27),
                        },
                        target: LetIn {
                         bindings: [
                          KeyValue(
                           AttributePath {
                            attributes: [
                             Raw {
                              content: "files",
                              position: (264, 13),
                             },
                            ],
                           },
                           FunctionApplication {
                            function: Variable {
                             identifier: "mapAttrsToList",
                             position: (264, 21),
                            },
                            arguments: [
                             Function {
                              argument: Some(
                               "n",
                              ),
                              arguments: FunctionArguments {
                               arguments: [],
                               ellipsis: false,
                              },
                              definition: Function {
                               argument: Some(
                                "v",
                               ),
                               arguments: FunctionArguments {
                                arguments: [],
                                ellipsis: false,
                               },
                               definition: FunctionApplication {
                                function: Variable {
                                 identifier: "writeText",
                                 position: (264, 43),
                                },
                                arguments: [
                                 String {
                                  parts: [
                                   Expression {
                                    expression: Variable {
                                     identifier: "n",
                                     position: (264, 56),
                                    },
                                   },
                                   Raw {
                                    content: ".json",
                                    position: (264, 58),
                                   },
                                  ],
                                 },
                                 FunctionApplication {
                                  function: PropertyAccess {
                                   expression: Variable {
                                    identifier: "builtins",
                                    position: (264, 66),
                                   },
                                   attribute_path: AttributePath {
                                    attributes: [
                                     Raw {
                                      content: "toJSON",
                                      position: (264, 75),
                                     },
                                    ],
                                   },
                                   default: None,
                                  },
                                  arguments: [
                                   Variable {
                                    identifier: "v",
                                    position: (264, 82),
                                   },
                                  ],
                                 },
                                ],
                               },
                               position: (264, 40),
                              },
                              position: (264, 37),
                             },
                             PropertyAccess {
                              expression: Variable {
                               identifier: "top",
                               position: (265, 15),
                              },
                              attribute_path: AttributePath {
                               attributes: [
                                Raw {
                                 content: "addonManager",
                                 position: (265, 19),
                                },
                                Raw {
                                 content: "bootstrapAddons",
                                 position: (265, 32),
                                },
                               ],
                              },
                              default: None,
                             },
                            ],
                           },
                          ),
                         ],
                         target: String {
                          parts: [
                           Raw {
                            content: "export KUBECONFIG=",
                            position: (268, 1),
                           },
                           Expression {
                            expression: Variable {
                             identifier: "clusterAdminKubeconfig",
                             position: (268, 33),
                            },
                           },
                           Raw {
                            content: "\n",
                            position: (268, 56),
                           },
                           Expression {
                            expression: Variable {
                             identifier: "kubernetes",
                             position: (269, 15),
                            },
                           },
                           Raw {
                            content: "/bin/kubectl apply -f ",
                            position: (269, 26),
                           },
                           Expression {
                            expression: FunctionApplication {
                             function: Variable {
                              identifier: "concatStringsSep",
                              position: (269, 50),
                             },
                             arguments: [
                              String {
                               parts: [
                                Raw {
                                 content: " \\\n -f ",
                                 position: (269, 68),
                                },
                               ],
                              },
                              Variable {
                               identifier: "files",
                               position: (269, 79),
                              },
                             ],
                            },
                           },
                           Raw {
                            content: "\n",
                            position: (269, 85),
                           },
                          ],
                         },
                         position: (263, 11),
                        },
                        position: (262, 22),
                       },
                      ),
                     ],
                     recursive: false,
                     position: (260, 65),
                    },
                   ],
                  },
                 ],
                 position: (251, 83),
                },
               ],
              },
             ],
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "environment",
               position: (273, 7),
              },
              Raw {
               content: "etc",
               position: (273, 19),
              },
              Expression {
               expression: PropertyAccess {
                expression: Variable {
                 identifier: "cfg",
                 position: (273, 25),
                },
                attribute_path: AttributePath {
                 attributes: [
                  Raw {
                   content: "etcClusterAdminKubeconfig",
                   position: (273, 29),
                  },
                 ],
                },
                default: None,
               },
              },
              Raw {
               content: "source",
               position: (273, 56),
              },
             ],
            },
            FunctionApplication {
             function: Variable {
              identifier: "mkIf",
              position: (273, 65),
             },
             arguments: [
              UnaryOperation {
               operator: Not,
               operand: FunctionApplication {
                function: Variable {
                 identifier: "isNull",
                 position: (273, 72),
                },
                arguments: [
                 PropertyAccess {
                  expression: Variable {
                   identifier: "cfg",
                   position: (273, 79),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "etcClusterAdminKubeconfig",
                     position: (273, 83),
                    },
                   ],
                  },
                  default: None,
                 },
                ],
               },
               position: (273, 71),
              },
              Variable {
               identifier: "clusterAdminKubeconfig",
               position: (274, 9),
              },
             ],
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "environment",
               position: (276, 7),
              },
              Raw {
               content: "systemPackages",
               position: (276, 19),
              },
             ],
            },
            FunctionApplication {
             function: Variable {
              identifier: "mkIf",
              position: (276, 36),
             },
             arguments: [
              BinaryOperation {
               operator: LogicalOr,
               operands: [
                PropertyAccess {
                 expression: Variable {
                  identifier: "top",
                  position: (276, 42),
                 },
                 attribute_path: AttributePath {
                  attributes: [
                   Raw {
                    content: "kubelet",
                    position: (276, 46),
                   },
                   Raw {
                    content: "enable",
                    position: (276, 54),
                   },
                  ],
                 },
                 default: None,
                },
                PropertyAccess {
                 expression: Variable {
                  identifier: "top",
                  position: (276, 64),
                 },
                 attribute_path: AttributePath {
                  attributes: [
                   Raw {
                    content: "proxy",
                    position: (276, 68),
                   },
                   Raw {
                    content: "enable",
                    position: (276, 74),
                   },
                  ],
                 },
                 default: None,
                },
               ],
               position: (276, 61),
              },
              List {
               elements: [
                FunctionApplication {
                 function: PropertyAccess {
                  expression: Variable {
                   identifier: "pkgs",
                   position: (277, 8),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "writeScriptBin",
                     position: (277, 13),
                    },
                   ],
                  },
                  default: None,
                 },
                 arguments: [
                  String {
                   parts: [
                    Raw {
                     content: "nixos-kubernetes-node-join",
                     position: (277, 29),
                    },
                   ],
                  },
                  String {
                   parts: [
                    Raw {
                     content: "set -e\nexec 1>&2\n\nif [ $# -gt 0 ]; then\n  echo \"Usage: $(basename $0)\"\n  echo \"\"\n  echo \"No args. Apitoken must be provided on stdin.\"\n  echo \"To get the apitoken, execute: 'sudo cat ",
                     position: (278, 1),
                    },
                    Expression {
                     expression: Variable {
                      identifier: "certmgrAPITokenPath",
                      position: (285, 59),
                     },
                    },
                    Raw {
                     content: "' on the master node.\"\n  exit 1\nfi\n\nif [ $(id -u) != 0 ]; then\n  echo \"Run as root please.\"\n  exit 1\nfi\n\nread -r token\nif [ ",
                     position: (285, 79),
                    },
                    Raw {
                     content: "$",
                     position: (295, 14),
                    },
                    Raw {
                     content: "{#token} != ",
                     position: (295, 17),
                    },
                    Expression {
                     expression: FunctionApplication {
                      function: Variable {
                       identifier: "toString",
                       position: (295, 31),
                      },
                      arguments: [
                       Variable {
                        identifier: "cfsslAPITokenLength",
                        position: (295, 40),
                       },
                      ],
                     },
                    },
                    Raw {
                     content: " ]; then\n  echo \"Token must be of length ",
                     position: (295, 60),
                    },
                    Expression {
                     expression: FunctionApplication {
                      function: Variable {
                       identifier: "toString",
                       position: (296, 43),
                      },
                      arguments: [
                       Variable {
                        identifier: "cfsslAPITokenLength",
                        position: (296, 52),
                       },
                      ],
                     },
                    },
                    Raw {
                     content: ".\"\n  exit 1\nfi\n\necho $token > ",
                     position: (296, 72),
                    },
                    Expression {
                     expression: Variable {
                      identifier: "certmgrAPITokenPath",
                      position: (300, 25),
                     },
                    },
                    Raw {
                     content: "\nchmod 600 ",
                     position: (300, 45),
                    },
                    Expression {
                     expression: Variable {
                      identifier: "certmgrAPITokenPath",
                      position: (301, 21),
                     },
                    },
                    Raw {
                     content: "\n\necho \"Restarting certmgr...\" >&1\nsystemctl restart certmgr\n\necho \"Waiting for certs to appear...\" >&1\n\n",
                     position: (301, 41),
                    },
                    Expression {
                     expression: FunctionApplication {
                      function: Variable {
                       identifier: "optionalString",
                       position: (308, 11),
                      },
                      arguments: [
                       PropertyAccess {
                        expression: Variable {
                         identifier: "top",
                         position: (308, 26),
                        },
                        attribute_path: AttributePath {
                         attributes: [
                          Raw {
                           content: "kubelet",
                           position: (308, 30),
                          },
                          Raw {
                           content: "enable",
                           position: (308, 38),
                          },
                         ],
                        },
                        default: None,
                       },
                       String {
                        parts: [
                         Raw {
                          content: "while [ ! -f ",
                          position: (309, 1),
                         },
                         Expression {
                          expression: PropertyAccess {
                           expression: Variable {
                            identifier: "cfg",
                            position: (309, 26),
                           },
                           attribute_path: AttributePath {
                            attributes: [
                             Raw {
                              content: "certs",
                              position: (309, 30),
                             },
                             Raw {
                              content: "kubelet",
                              position: (309, 36),
                             },
                             Raw {
                              content: "cert",
                              position: (309, 44),
                             },
                            ],
                           },
                           default: None,
                          },
                         },
                         Raw {
                          content: " ]; do sleep 1; done\necho \"Restarting kubelet...\" >&1\nsystemctl restart kubelet\n",
                          position: (309, 49),
                         },
                        ],
                       },
                      ],
                     },
                    },
                    Raw {
                     content: "\n\n",
                     position: (312, 12),
                    },
                    Expression {
                     expression: FunctionApplication {
                      function: Variable {
                       identifier: "optionalString",
                       position: (314, 11),
                      },
                      arguments: [
                       PropertyAccess {
                        expression: Variable {
                         identifier: "top",
                         position: (314, 26),
                        },
                        attribute_path: AttributePath {
                         attributes: [
                          Raw {
                           content: "proxy",
                           position: (314, 30),
                          },
                          Raw {
                           content: "enable",
                           position: (314, 36),
                          },
                         ],
                        },
                        default: None,
                       },
                       String {
                        parts: [
                         Raw {
                          content: "while [ ! -f ",
                          position: (315, 1),
                         },
                         Expression {
                          expression: PropertyAccess {
                           expression: Variable {
                            identifier: "cfg",
                            position: (315, 26),
                           },
                           attribute_path: AttributePath {
                            attributes: [
                             Raw {
                              content: "certs",
                              position: (315, 30),
                             },
                             Raw {
                              content: "kubeProxyClient",
                              position: (315, 36),
                             },
                             Raw {
                              content: "cert",
                              position: (315, 52),
                             },
                            ],
                           },
                           default: None,
                          },
                         },
                         Raw {
                          content: " ]; do sleep 1; done\necho \"Restarting kube-proxy...\" >&1\nsystemctl restart kube-proxy\n",
                          position: (315, 57),
                         },
                        ],
                       },
                      ],
                     },
                    },
                    Raw {
                     content: "\n\n",
                     position: (318, 12),
                    },
                    Expression {
                     expression: FunctionApplication {
                      function: Variable {
                       identifier: "optionalString",
                       position: (320, 11),
                      },
                      arguments: [
                       PropertyAccess {
                        expression: Variable {
                         identifier: "top",
                         position: (320, 26),
                        },
                        attribute_path: AttributePath {
                         attributes: [
                          Raw {
                           content: "flannel",
                           position: (320, 30),
                          },
                          Raw {
                           content: "enable",
                           position: (320, 38),
                          },
                         ],
                        },
                        default: None,
                       },
                       String {
                        parts: [
                         Raw {
                          content: "while [ ! -f ",
                          position: (321, 1),
                         },
                         Expression {
                          expression: PropertyAccess {
                           expression: Variable {
                            identifier: "cfg",
                            position: (321, 26),
                           },
                           attribute_path: AttributePath {
                            attributes: [
                             Raw {
                              content: "certs",
                              position: (321, 30),
                             },
                             Raw {
                              content: "flannelClient",
                              position: (321, 36),
                             },
                             Raw {
                              content: "cert",
                              position: (321, 50),
                             },
                            ],
                           },
                           default: None,
                          },
                         },
                         Raw {
                          content: " ]; do sleep 1; done\necho \"Restarting flannel...\" >&1\nsystemctl restart flannel\n",
                          position: (321, 55),
                         },
                        ],
                       },
                      ],
                     },
                    },
                    Raw {
                     content: "\n\necho \"Node joined succesfully\"\n",
                     position: (324, 12),
                    },
                   ],
                  },
                 ],
                },
               ],
               position: (276, 82),
              },
             ],
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "services",
               position: (331, 7),
              },
              Raw {
               content: "etcd",
               position: (331, 16),
              },
             ],
            },
            With {
             expression: PropertyAccess {
              expression: Variable {
               identifier: "cfg",
               position: (331, 28),
              },
              attribute_path: AttributePath {
               attributes: [
                Raw {
                 content: "certs",
                 position: (331, 32),
                },
                Raw {
                 content: "etcd",
                 position: (331, 38),
                },
               ],
              },
              default: None,
             },
             target: Map {
              bindings: [
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "listenClientUrls",
                   position: (332, 9),
                  },
                 ],
                },
                List {
                 elements: [
                  String {
                   parts: [
                    Raw {
                     content: "https://127.0.0.1:2379",
                     position: (332, 30),
                    },
                   ],
                  },
                 ],
                 position: (332, 28),
                },
               ),
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "listenPeerUrls",
                   position: (333, 9),
                  },
                 ],
                },
                List {
                 elements: [
                  String {
                   parts: [
                    Raw {
                     content: "https://127.0.0.1:2380",
                     position: (333, 28),
                    },
                   ],
                  },
                 ],
                 position: (333, 26),
                },
               ),
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "advertiseClientUrls",
                   position: (334, 9),
                  },
                 ],
                },
                List {
                 elements: [
                  String {
                   parts: [
                    Raw {
                     content: "https://etcd.local:2379",
                     position: (334, 33),
                    },
                   ],
                  },
                 ],
                 position: (334, 31),
                },
               ),
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "initialCluster",
                   position: (335, 9),
                  },
                 ],
                },
                List {
                 elements: [
                  String {
                   parts: [
                    Expression {
                     expression: PropertyAccess {
                      expression: Variable {
                       identifier: "top",
                       position: (335, 30),
                      },
                      attribute_path: AttributePath {
                       attributes: [
                        Raw {
                         content: "masterAddress",
                         position: (335, 34),
                        },
                       ],
                      },
                      default: None,
                     },
                    },
                    Raw {
                     content: "=https://etcd.local:2380",
                     position: (335, 48),
                    },
                   ],
                  },
                 ],
                 position: (335, 26),
                },
               ),
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "initialAdvertisePeerUrls",
                   position: (336, 9),
                  },
                 ],
                },
                List {
                 elements: [
                  String {
                   parts: [
                    Raw {
                     content: "https://etcd.local:2380",
                     position: (336, 38),
                    },
                   ],
                  },
                 ],
                 position: (336, 36),
                },
               ),
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "certFile",
                   position: (337, 9),
                  },
                 ],
                },
                FunctionApplication {
                 function: Variable {
                  identifier: "mkDefault",
                  position: (337, 20),
                 },
                 arguments: [
                  Variable {
                   identifier: "cert",
                   position: (337, 30),
                  },
                 ],
                },
               ),
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "keyFile",
                   position: (338, 9),
                  },
                 ],
                },
                FunctionApplication {
                 function: Variable {
                  identifier: "mkDefault",
                  position: (338, 19),
                 },
                 arguments: [
                  Variable {
                   identifier: "key",
                   position: (338, 29),
                  },
                 ],
                },
               ),
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "trustedCaFile",
                   position: (339, 9),
                  },
                 ],
                },
                FunctionApplication {
                 function: Variable {
                  identifier: "mkDefault",
                  position: (339, 25),
                 },
                 arguments: [
                  Variable {
                   identifier: "caCert",
                   position: (339, 35),
                  },
                 ],
                },
               ),
              ],
              recursive: false,
              position: (331, 44),
             },
             position: (331, 23),
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "networking",
               position: (341, 7),
              },
              Raw {
               content: "extraHosts",
               position: (341, 18),
              },
             ],
            },
            FunctionApplication {
             function: Variable {
              identifier: "mkIf",
              position: (341, 31),
             },
             arguments: [
              PropertyAccess {
               expression: Variable {
                identifier: "config",
                position: (341, 37),
               },
               attribute_path: AttributePath {
                attributes: [
                 Raw {
                  content: "services",
                  position: (341, 44),
                 },
                 Raw {
                  content: "etcd",
                  position: (341, 53),
                 },
                 Raw {
                  content: "enable",
                  position: (341, 58),
                 },
                ],
               },
               default: None,
              },
              String {
               parts: [
                Raw {
                 content: "127.0.0.1 etcd.",
                 position: (342, 1),
                },
                Expression {
                 expression: PropertyAccess {
                  expression: Variable {
                   identifier: "top",
                   position: (342, 26),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "addons",
                     position: (342, 30),
                    },
                    Raw {
                     content: "dns",
                     position: (342, 37),
                    },
                    Raw {
                     content: "clusterDomain",
                     position: (342, 41),
                    },
                   ],
                  },
                  default: None,
                 },
                },
                Raw {
                 content: " etcd.local\n",
                 position: (342, 55),
                },
               ],
              },
             ],
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "services",
               position: (345, 7),
              },
              Raw {
               content: "flannel",
               position: (345, 16),
              },
             ],
            },
            With {
             expression: PropertyAccess {
              expression: Variable {
               identifier: "cfg",
               position: (345, 31),
              },
              attribute_path: AttributePath {
               attributes: [
                Raw {
                 content: "certs",
                 position: (345, 35),
                },
                Raw {
                 content: "flannelClient",
                 position: (345, 41),
                },
               ],
              },
              default: None,
             },
             target: Map {
              bindings: [
               KeyValue(
                AttributePath {
                 attributes: [
                  Raw {
                   content: "kubeconfig",
                   position: (346, 9),
                  },
                 ],
                },
                FunctionApplication {
                 function: PropertyAccess {
                  expression: Variable {
                   identifier: "top",
                   position: (346, 22),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "lib",
                     position: (346, 26),
                    },
                    Raw {
                     content: "mkKubeConfig",
                     position: (346, 30),
                    },
                   ],
                  },
                  default: None,
                 },
                 arguments: [
                  String {
                   parts: [
                    Raw {
                     content: "flannel",
                     position: (346, 44),
                    },
                   ],
                  },
                  Map {
                   bindings: [
                    KeyValue(
                     AttributePath {
                      attributes: [
                       Raw {
                        content: "server",
                        position: (347, 11),
                       },
                      ],
                     },
                     PropertyAccess {
                      expression: Variable {
                       identifier: "top",
                       position: (347, 20),
                      },
                      attribute_path: AttributePath {
                       attributes: [
                        Raw {
                         content: "apiserverAddress",
                         position: (347, 24),
                        },
                       ],
                      },
                      default: None,
                     },
                    ),
                    KeyValue(
                     AttributePath {
                      attributes: [
                       Raw {
                        content: "certFile",
                        position: (348, 11),
                       },
                      ],
                     },
                     Variable {
                      identifier: "cert",
                      position: (348, 22),
                     },
                    ),
                    KeyValue(
                     AttributePath {
                      attributes: [
                       Raw {
                        content: "keyFile",
                        position: (349, 11),
                       },
                      ],
                     },
                     Variable {
                      identifier: "key",
                      position: (349, 21),
                     },
                    ),
                   ],
                   recursive: false,
                   position: (346, 53),
                  },
                 ],
                },
               ),
              ],
              recursive: false,
              position: (345, 56),
             },
             position: (345, 26),
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "services",
               position: (353, 7),
              },
              Raw {
               content: "kubernetes",
               position: (353, 16),
              },
             ],
            },
            Map {
             bindings: [
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "apiserver",
                  position: (355, 9),
                 },
                ],
               },
               FunctionApplication {
                function: Variable {
                 identifier: "mkIf",
                 position: (355, 21),
                },
                arguments: [
                 PropertyAccess {
                  expression: Variable {
                   identifier: "top",
                   position: (355, 26),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "apiserver",
                     position: (355, 30),
                    },
                    Raw {
                     content: "enable",
                     position: (355, 40),
                    },
                   ],
                  },
                  default: None,
                 },
                 With {
                  expression: PropertyAccess {
                   expression: Variable {
                    identifier: "cfg",
                    position: (355, 53),
                   },
                   attribute_path: AttributePath {
                    attributes: [
                     Raw {
                      content: "certs",
                      position: (355, 57),
                     },
                     Raw {
                      content: "apiServer",
                      position: (355, 63),
                     },
                    ],
                   },
                   default: None,
                  },
                  target: Map {
                   bindings: [
                    KeyValue(
                     AttributePath {
                      attributes: [
                       Raw {
                        content: "etcd",
                        position: (356, 11),
                       },
                      ],
                     },
                     With {
                      expression: PropertyAccess {
                       expression: Variable {
                        identifier: "cfg",
                        position: (356, 23),
                       },
                       attribute_path: AttributePath {
                        attributes: [
                         Raw {
                          content: "certs",
                          position: (356, 27),
                         },
                         Raw {
                          content: "apiserverEtcdClient",
                          position: (356, 33),
                         },
                        ],
                       },
                       default: None,
                      },
                      target: Map {
                       bindings: [
                        KeyValue(
                         AttributePath {
                          attributes: [
                           Raw {
                            content: "servers",
                            position: (357, 13),
                           },
                          ],
                         },
                         List {
                          elements: [
                           String {
                            parts: [
                             Raw {
                              content: "https://etcd.local:2379",
                              position: (357, 25),
                             },
                            ],
                           },
                          ],
                          position: (357, 23),
                         },
                        ),
                        KeyValue(
                         AttributePath {
                          attributes: [
                           Raw {
                            content: "certFile",
                            position: (358, 13),
                           },
                          ],
                         },
                         FunctionApplication {
                          function: Variable {
                           identifier: "mkDefault",
                           position: (358, 24),
                          },
                          arguments: [
                           Variable {
                            identifier: "cert",
                            position: (358, 34),
                           },
                          ],
                         },
                        ),
                        KeyValue(
                         AttributePath {
                          attributes: [
                           Raw {
                            content: "keyFile",
                            position: (359, 13),
                           },
                          ],
                         },
                         FunctionApplication {
                          function: Variable {
                           identifier: "mkDefault",
                           position: (359, 23),
                          },
                          arguments: [
                           Variable {
                            identifier: "key",
                            position: (359, 33),
                           },
                          ],
                         },
                        ),
                        KeyValue(
                         AttributePath {
                          attributes: [
                           Raw {
                            content: "caFile",
                            position: (360, 13),
                           },
                          ],
                         },
                         FunctionApplication {
                          function: Variable {
                           identifier: "mkDefault",
                           position: (360, 22),
                          },
                          arguments: [
                           Variable {
                            identifier: "caCert",
                            position: (360, 32),
                           },
                          ],
                         },
                        ),
                       ],
                       recursive: false,
                       position: (356, 54),
                      },
                      position: (356, 18),
                     },
                    ),
                    KeyValue(
                     AttributePath {
                      attributes: [
                       Raw {
                        content: "clientCaFile",
                        position: (362, 11),
                       },
                      ],
                     },
                     FunctionApplication {
                      function: Variable {
                       identifier: "mkDefault",
                       position: (362, 26),
                      },
                      arguments: [
                       Variable {
                        identifier: "caCert",
                        position: (362, 36),
                       },
                      ],
                     },
                    ),
                    KeyValue(
                     AttributePath {
                      attributes: [
                       Raw {
                        content: "tlsCertFile",
                        position: (363, 11),
                       },
                      ],
                     },
                     FunctionApplication {
                      function: Variable {
                       identifier: "mkDefault",
                       position: (363, 25),
                      },
                      arguments: [
                       Variable {
                        identifier: "cert",
                        position: (363, 35),
                       },
                      ],
                     },
                    ),
                    KeyValue(
                     AttributePath {
                      attributes: [
                       Raw {
                        content: "tlsKeyFile",
                        position: (364, 11),
                       },
                      ],
                     },
                     FunctionApplication {
                      function: Variable {
                       identifier: "mkDefault",
                       position: (364, 24),
                      },
                      arguments: [
                       Variable {
                        identifier: "key",
                        position: (364, 34),
                       },
                      ],
                     },
                    ),
                    KeyValue(
                     AttributePath {
                      attributes: [
                       Raw {
                        content: "serviceAccountKeyFile",
                        position: (365, 11),
                       },
                      ],
                     },
                     FunctionApplication {
                      function: Variable {
                       identifier: "mkDefault",
                       position: (365, 35),
                      },
                      arguments: [
                       PropertyAccess {
                        expression: Variable {
                         identifier: "cfg",
                         position: (365, 45),
                        },
                        attribute_path: AttributePath {
                         attributes: [
                          Raw {
                           content: "certs",
                           position: (365, 49),
                          },
                          Raw {
                           content: "serviceAccount",
                           position: (365, 55),
                          },
                          Raw {
                           content: "cert",
                           position: (365, 70),
                          },
                         ],
                        },
                        default: None,
                       },
                      ],
                     },
                    ),
                    KeyValue(
                     AttributePath {
                      attributes: [
                       Raw {
                        content: "serviceAccountSigningKeyFile",
                        position: (366, 11),
                       },
                      ],
                     },
                     FunctionApplication {
                      function: Variable {
                       identifier: "mkDefault",
                       position: (366, 42),
                      },
                      arguments: [
                       PropertyAccess {
                        expression: Variable {
                         identifier: "cfg",
                         position: (366, 52),
                        },
                        attribute_path: AttributePath {
                         attributes: [
                          Raw {
                           content: "certs",
                           position: (366, 56),
                          },
                          Raw {
                           content: "serviceAccount",
                           position: (366, 62),
                          },
                          Raw {
                           content: "key",
                           position: (366, 77),
                          },
                         ],
                        },
                        default: None,
                       },
                      ],
                     },
                    ),
                    KeyValue(
                     AttributePath {
                      attributes: [
                       Raw {
                        content: "kubeletClientCaFile",
                        position: (367, 11),
                       },
                      ],
                     },
                     FunctionApplication {
                      function: Variable {
                       identifier: "mkDefault",
                       position: (367, 33),
                      },
                      arguments: [
                       Variable {
                        identifier: "caCert",
                        position: (367, 43),
                       },
                      ],
                     },
                    ),
                    KeyValue(
                     AttributePath {
                      attributes: [
                       Raw {
                        content: "kubeletClientCertFile",
                        position: (368, 11),
                       },
                      ],
                     },
                     FunctionApplication {
                      function: Variable {
                       identifier: "mkDefault",
                       position: (368, 35),
                      },
                      arguments: [
                       PropertyAccess {
                        expression: Variable {
                         identifier: "cfg",
                         position: (368, 45),
                        },
                        attribute_path: AttributePath {
                         attributes: [
                          Raw {
                           content: "certs",
                           position: (368, 49),
                          },
                          Raw {
                           content: "apiserverKubeletClient",
                           position: (368, 55),
                          },
                          Raw {
                           content: "cert",
                           position: (368, 78),
                          },
                         ],
                        },
                        default: None,
                       },
                      ],
                     },
                    ),
                    KeyValue(
                     AttributePath {
                      attributes: [
                       Raw {
                        content: "kubeletClientKeyFile",
                        position: (369, 11),
                       },
                      ],
                     },
                     FunctionApplication {
                      function: Variable {
                       identifier: "mkDefault",
                       position: (369, 34),
                      },
                      arguments: [
                       PropertyAccess {
                        expression: Variable {
                         identifier: "cfg",
                         position: (369, 44),
                        },
                        attribute_path: AttributePath {
                         attributes: [
                          Raw {
                           content: "certs",
                           position: (369, 48),
                          },
                          Raw {
                           content: "apiserverKubeletClient",
                           position: (369, 54),
                          },
                          Raw {
                           content: "key",
                           position: (369, 77),
                          },
                         ],
                        },
                        default: None,
                       },
                      ],
                     },
                    ),
                    KeyValue(
                     AttributePath {
                      attributes: [
                       Raw {
                        content: "proxyClientCertFile",
                        position: (370, 11),
                       },
                      ],
                     },
                     FunctionApplication {
                      function: Variable {
                       identifier: "mkDefault",
                       position: (370, 33),
                      },
                      arguments: [
                       PropertyAccess {
                        expression: Variable {
                         identifier: "cfg",
                         position: (370, 43),
                        },
                        attribute_path: AttributePath {
                         attributes: [
                          Raw {
                           content: "certs",
                           position: (370, 47),
                          },
                          Raw {
                           content: "apiserverProxyClient",
                           position: (370, 53),
                          },
                          Raw {
                           content: "cert",
                           position: (370, 74),
                          },
                         ],
                        },
                        default: None,
                       },
                      ],
                     },
                    ),
                    KeyValue(
                     AttributePath {
                      attributes: [
                       Raw {
                        content: "proxyClientKeyFile",
                        position: (371, 11),
                       },
                      ],
                     },
                     FunctionApplication {
                      function: Variable {
                       identifier: "mkDefault",
                       position: (371, 32),
                      },
                      arguments: [
                       PropertyAccess {
                        expression: Variable {
                         identifier: "cfg",
                         position: (371, 42),
                        },
                        attribute_path: AttributePath {
                         attributes: [
                          Raw {
                           content: "certs",
                           position: (371, 46),
                          },
                          Raw {
                           content: "apiserverProxyClient",
                           position: (371, 52),
                          },
                          Raw {
                           content: "key",
                           position: (371, 73),
                          },
                         ],
                        },
                        default: None,
                       },
                      ],
                     },
                    ),
                   ],
                   recursive: false,
                   position: (355, 74),
                  },
                  position: (355, 48),
                 },
                ],
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "controllerManager",
                  position: (373, 9),
                 },
                ],
               },
               FunctionApplication {
                function: Variable {
                 identifier: "mkIf",
                 position: (373, 29),
                },
                arguments: [
                 PropertyAccess {
                  expression: Variable {
                   identifier: "top",
                   position: (373, 34),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "controllerManager",
                     position: (373, 38),
                    },
                    Raw {
                     content: "enable",
                     position: (373, 56),
                    },
                   ],
                  },
                  default: None,
                 },
                 Map {
                  bindings: [
                   KeyValue(
                    AttributePath {
                     attributes: [
                      Raw {
                       content: "serviceAccountKeyFile",
                       position: (374, 11),
                      },
                     ],
                    },
                    FunctionApplication {
                     function: Variable {
                      identifier: "mkDefault",
                      position: (374, 35),
                     },
                     arguments: [
                      PropertyAccess {
                       expression: Variable {
                        identifier: "cfg",
                        position: (374, 45),
                       },
                       attribute_path: AttributePath {
                        attributes: [
                         Raw {
                          content: "certs",
                          position: (374, 49),
                         },
                         Raw {
                          content: "serviceAccount",
                          position: (374, 55),
                         },
                         Raw {
                          content: "key",
                          position: (374, 70),
                         },
                        ],
                       },
                       default: None,
                      },
                     ],
                    },
                   ),
                   KeyValue(
                    AttributePath {
                     attributes: [
                      Raw {
                       content: "rootCaFile",
                       position: (375, 11),
                      },
                     ],
                    },
                    PropertyAccess {
                     expression: Variable {
                      identifier: "cfg",
                      position: (375, 24),
                     },
                     attribute_path: AttributePath {
                      attributes: [
                       Raw {
                        content: "certs",
                        position: (375, 28),
                       },
                       Raw {
                        content: "controllerManagerClient",
                        position: (375, 34),
                       },
                       Raw {
                        content: "caCert",
                        position: (375, 58),
                       },
                      ],
                     },
                     default: None,
                    },
                   ),
                   KeyValue(
                    AttributePath {
                     attributes: [
                      Raw {
                       content: "kubeconfig",
                       position: (376, 11),
                      },
                     ],
                    },
                    With {
                     expression: PropertyAccess {
                      expression: Variable {
                       identifier: "cfg",
                       position: (376, 29),
                      },
                      attribute_path: AttributePath {
                       attributes: [
                        Raw {
                         content: "certs",
                         position: (376, 33),
                        },
                        Raw {
                         content: "controllerManagerClient",
                         position: (376, 39),
                        },
                       ],
                      },
                      default: None,
                     },
                     target: Map {
                      bindings: [
                       KeyValue(
                        AttributePath {
                         attributes: [
                          Raw {
                           content: "certFile",
                           position: (377, 13),
                          },
                         ],
                        },
                        FunctionApplication {
                         function: Variable {
                          identifier: "mkDefault",
                          position: (377, 24),
                         },
                         arguments: [
                          Variable {
                           identifier: "cert",
                           position: (377, 34),
                          },
                         ],
                        },
                       ),
                       KeyValue(
                        AttributePath {
                         attributes: [
                          Raw {
                           content: "keyFile",
                           position: (378, 13),
                          },
                         ],
                        },
                        FunctionApplication {
                         function: Variable {
                          identifier: "mkDefault",
                          position: (378, 23),
                         },
                         arguments: [
                          Variable {
                           identifier: "key",
                           position: (378, 33),
                          },
                         ],
                        },
                       ),
                      ],
                      recursive: false,
                      position: (376, 64),
                     },
                     position: (376, 24),
                    },
                   ),
                  ],
                  recursive: false,
                  position: (373, 63),
                 },
                ],
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "scheduler",
                  position: (381, 9),
                 },
                ],
               },
               FunctionApplication {
                function: Variable {
                 identifier: "mkIf",
                 position: (381, 21),
                },
                arguments: [
                 PropertyAccess {
                  expression: Variable {
                   identifier: "top",
                   position: (381, 26),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "scheduler",
                     position: (381, 30),
                    },
                    Raw {
                     content: "enable",
                     position: (381, 40),
                    },
                   ],
                  },
                  default: None,
                 },
                 Map {
                  bindings: [
                   KeyValue(
                    AttributePath {
                     attributes: [
                      Raw {
                       content: "kubeconfig",
                       position: (382, 11),
                      },
                     ],
                    },
                    With {
                     expression: PropertyAccess {
                      expression: Variable {
                       identifier: "cfg",
                       position: (382, 29),
                      },
                      attribute_path: AttributePath {
                       attributes: [
                        Raw {
                         content: "certs",
                         position: (382, 33),
                        },
                        Raw {
                         content: "schedulerClient",
                         position: (382, 39),
                        },
                       ],
                      },
                      default: None,
                     },
                     target: Map {
                      bindings: [
                       KeyValue(
                        AttributePath {
                         attributes: [
                          Raw {
                           content: "certFile",
                           position: (383, 13),
                          },
                         ],
                        },
                        FunctionApplication {
                         function: Variable {
                          identifier: "mkDefault",
                          position: (383, 24),
                         },
                         arguments: [
                          Variable {
                           identifier: "cert",
                           position: (383, 34),
                          },
                         ],
                        },
                       ),
                       KeyValue(
                        AttributePath {
                         attributes: [
                          Raw {
                           content: "keyFile",
                           position: (384, 13),
                          },
                         ],
                        },
                        FunctionApplication {
                         function: Variable {
                          identifier: "mkDefault",
                          position: (384, 23),
                         },
                         arguments: [
                          Variable {
                           identifier: "key",
                           position: (384, 33),
                          },
                         ],
                        },
                       ),
                      ],
                      recursive: false,
                      position: (382, 56),
                     },
                     position: (382, 24),
                    },
                   ),
                  ],
                  recursive: false,
                  position: (381, 47),
                 },
                ],
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "kubelet",
                  position: (387, 9),
                 },
                ],
               },
               FunctionApplication {
                function: Variable {
                 identifier: "mkIf",
                 position: (387, 19),
                },
                arguments: [
                 PropertyAccess {
                  expression: Variable {
                   identifier: "top",
                   position: (387, 24),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "kubelet",
                     position: (387, 28),
                    },
                    Raw {
                     content: "enable",
                     position: (387, 36),
                    },
                   ],
                  },
                  default: None,
                 },
                 Map {
                  bindings: [
                   KeyValue(
                    AttributePath {
                     attributes: [
                      Raw {
                       content: "clientCaFile",
                       position: (388, 11),
                      },
                     ],
                    },
                    FunctionApplication {
                     function: Variable {
                      identifier: "mkDefault",
                      position: (388, 26),
                     },
                     arguments: [
                      PropertyAccess {
                       expression: Variable {
                        identifier: "cfg",
                        position: (388, 36),
                       },
                       attribute_path: AttributePath {
                        attributes: [
                         Raw {
                          content: "certs",
                          position: (388, 40),
                         },
                         Raw {
                          content: "kubelet",
                          position: (388, 46),
                         },
                         Raw {
                          content: "caCert",
                          position: (388, 54),
                         },
                        ],
                       },
                       default: None,
                      },
                     ],
                    },
                   ),
                   KeyValue(
                    AttributePath {
                     attributes: [
                      Raw {
                       content: "tlsCertFile",
                       position: (389, 11),
                      },
                     ],
                    },
                    FunctionApplication {
                     function: Variable {
                      identifier: "mkDefault",
                      position: (389, 25),
                     },
                     arguments: [
                      PropertyAccess {
                       expression: Variable {
                        identifier: "cfg",
                        position: (389, 35),
                       },
                       attribute_path: AttributePath {
                        attributes: [
                         Raw {
                          content: "certs",
                          position: (389, 39),
                         },
                         Raw {
                          content: "kubelet",
                          position: (389, 45),
                         },
                         Raw {
                          content: "cert",
                          position: (389, 53),
                         },
                        ],
                       },
                       default: None,
                      },
                     ],
                    },
                   ),
                   KeyValue(
                    AttributePath {
                     attributes: [
                      Raw {
                       content: "tlsKeyFile",
                       position: (390, 11),
                      },
                     ],
                    },
                    FunctionApplication {
                     function: Variable {
                      identifier: "mkDefault",
                      position: (390, 24),
                     },
                     arguments: [
                      PropertyAccess {
                       expression: Variable {
                        identifier: "cfg",
                        position: (390, 34),
                       },
                       attribute_path: AttributePath {
                        attributes: [
                         Raw {
                          content: "certs",
                          position: (390, 38),
                         },
                         Raw {
                          content: "kubelet",
                          position: (390, 44),
                         },
                         Raw {
                          content: "key",
                          position: (390, 52),
                         },
                        ],
                       },
                       default: None,
                      },
                     ],
                    },
                   ),
                   KeyValue(
                    AttributePath {
                     attributes: [
                      Raw {
                       content: "kubeconfig",
                       position: (391, 11),
                      },
                     ],
                    },
                    With {
                     expression: PropertyAccess {
                      expression: Variable {
                       identifier: "cfg",
                       position: (391, 29),
                      },
                      attribute_path: AttributePath {
                       attributes: [
                        Raw {
                         content: "certs",
                         position: (391, 33),
                        },
                        Raw {
                         content: "kubeletClient",
                         position: (391, 39),
                        },
                       ],
                      },
                      default: None,
                     },
                     target: Map {
                      bindings: [
                       KeyValue(
                        AttributePath {
                         attributes: [
                          Raw {
                           content: "certFile",
                           position: (392, 13),
                          },
                         ],
                        },
                        FunctionApplication {
                         function: Variable {
                          identifier: "mkDefault",
                          position: (392, 24),
                         },
                         arguments: [
                          Variable {
                           identifier: "cert",
                           position: (392, 34),
                          },
                         ],
                        },
                       ),
                       KeyValue(
                        AttributePath {
                         attributes: [
                          Raw {
                           content: "keyFile",
                           position: (393, 13),
                          },
                         ],
                        },
                        FunctionApplication {
                         function: Variable {
                          identifier: "mkDefault",
                          position: (393, 23),
                         },
                         arguments: [
                          Variable {
                           identifier: "key",
                           position: (393, 33),
                          },
                         ],
                        },
                       ),
                      ],
                      recursive: false,
                      position: (391, 54),
                     },
                     position: (391, 24),
                    },
                   ),
                  ],
                  recursive: false,
                  position: (387, 43),
                 },
                ],
               },
              ),
              KeyValue(
               AttributePath {
                attributes: [
                 Raw {
                  content: "proxy",
                  position: (396, 9),
                 },
                ],
               },
               FunctionApplication {
                function: Variable {
                 identifier: "mkIf",
                 position: (396, 17),
                },
                arguments: [
                 PropertyAccess {
                  expression: Variable {
                   identifier: "top",
                   position: (396, 22),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "proxy",
                     position: (396, 26),
                    },
                    Raw {
                     content: "enable",
                     position: (396, 32),
                    },
                   ],
                  },
                  default: None,
                 },
                 Map {
                  bindings: [
                   KeyValue(
                    AttributePath {
                     attributes: [
                      Raw {
                       content: "kubeconfig",
                       position: (397, 11),
                      },
                     ],
                    },
                    With {
                     expression: PropertyAccess {
                      expression: Variable {
                       identifier: "cfg",
                       position: (397, 29),
                      },
                      attribute_path: AttributePath {
                       attributes: [
                        Raw {
                         content: "certs",
                         position: (397, 33),
                        },
                        Raw {
                         content: "kubeProxyClient",
                         position: (397, 39),
                        },
                       ],
                      },
                      default: None,
                     },
                     target: Map {
                      bindings: [
                       KeyValue(
                        AttributePath {
                         attributes: [
                          Raw {
                           content: "certFile",
                           position: (398, 13),
                          },
                         ],
                        },
                        FunctionApplication {
                         function: Variable {
                          identifier: "mkDefault",
                          position: (398, 24),
                         },
                         arguments: [
                          Variable {
                           identifier: "cert",
                           position: (398, 34),
                          },
                         ],
                        },
                       ),
                       KeyValue(
                        AttributePath {
                         attributes: [
                          Raw {
                           content: "keyFile",
                           position: (399, 13),
                          },
                         ],
                        },
                        FunctionApplication {
                         function: Variable {
                          identifier: "mkDefault",
                          position: (399, 23),
                         },
                         arguments: [
                          Variable {
                           identifier: "key",
                           position: (399, 33),
                          },
                         ],
                        },
                       ),
                      ],
                      recursive: false,
                      position: (397, 56),
                     },
                     position: (397, 24),
                    },
                   ),
                  ],
                  recursive: false,
                  position: (396, 39),
                 },
                ],
               },
              ),
             ],
             recursive: false,
             position: (353, 29),
            },
           ),
          ],
          recursive: false,
          position: (134, 3),
         },
         position: (129, 4),
        },
       ],
      },
     ),
     KeyValue(
      AttributePath {
       attributes: [
        Raw {
         content: "meta",
         position: (405, 3),
        },
        Raw {
         content: "buildDocsInSandbox",
         position: (405, 8),
        },
       ],
      },
      Variable {
       identifier: "false",
       position: (405, 29),
      },
     ),
    ],
    recursive: false,
    position: (40, 1),
   },
   position: (5, 1),
  },
  position: (3, 1),
 },
 position: (1, 1),
}